On Monday, February 03, 2014 11:48:50 AM Lonnie Olson wrote: > On Sun, Feb 2, 2014 at 4:55 PM, S. Dale Morrey <[email protected]> wrote: > > Has anyone here managed to completely eliminate a root password once it's > > set? > > I setup a server to be certificate auth for SSH. But I seem to still be > > able to SSH in with a password too. > > /etc/ssh/sshd_config > PermitRootLogin no # root cannot login at all > or > PermitRootLogin without-password # root can only login via SSH keys
There is also the forced-commands-only option that I've found useful in a couple of places. /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
